This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json) Hash identifier: uPz1jQKLnq6K9Lf3JbAHOq5gGSElDCM28xtTZ+Am2aw= Subject key identifier: 90:2E:8A:95:F2:53:C5:11:DB:59:F6:23:82:61:47:59:8F:83:30:01 Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Certificate serial: 019AF12EDBD875355955BFEA7A88BA8E4CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft Manifest number: 07D3 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa (hash: o+w9uCPhfVsnCQk8/ZFs5vyGrQvgAaes0qJUqUvPv88=) 2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=) 3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=) 4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 4k/pBdUXCZf6YOPENwOMZ7PO25l/UPUvQ0NsXykQq3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:db:d8:75:35:59:55:bf:ea:7a:88:ba:8e:4c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=902e8a95f253c511db59f623826147598f833001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:b1:6e:c5:45:71:a4:32:53:bc:8b:34:9e: 44:c3:df:11:9b:d4:8f:b7:39:e3:b7:a2:a8:85:69: 1f:37:3e:bd:d4:89:58:f2:f7:19:1d:a2:b9:36:05: 47:10:c0:7e:5b:65:14:3b:3d:04:a9:0d:35:ec:49: a0:3c:a3:50:c8:dc:2d:96:f7:34:8c:b9:48:42:31: 34:9b:32:07:68:d0:8a:0f:7d:a1:50:0c:18:d2:58: a8:43:66:6a:60:65:3b:c5:45:9a:f8:9b:e3:a6:8b: 83:29:5d:e3:c6:fc:08:d3:e5:53:47:44:c3:20:4a: 89:b9:28:b8:c3:bf:76:8b:99:50:0c:3d:07:bf:ba: a8:49:19:10:67:a8:f9:ad:48:63:16:48:ff:3f:32: cc:56:ff:4a:c1:65:9b:4a:29:09:60:b6:1e:1f:2f: e5:37:fe:ab:a8:ae:1f:9f:b0:45:21:26:6e:d4:58: 96:21:d3:e2:6b:aa:e9:d4:5a:9d:76:d7:f1:14:30: fc:50:15:34:79:9b:8f:23:f6:b5:fd:25:6b:85:7a: 61:b6:73:d4:ff:9a:c3:ef:65:74:95:e8:07:1f:1c: 80:3c:a0:9f:7c:4a:bf:43:83:5a:3f:54:d7:bb:57: 29:84:c1:09:26:86:44:db:21:6e:45:9b:31:7e:3a: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2E:8A:95:F2:53:C5:11:DB:59:F6:23:82:61:47:59:8F:83:30:01 X509v3 Authority Key Identifier: keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3e:cd:36:c5:7d:19:f7:a0:92:35:d3:ff:34:ff:6d:0e:30: 1c:90:f8:5d:11:eb:f1:04:8b:90:e1:8f:67:8d:20:22:de:14: f8:87:87:b6:bb:8d:c1:9f:ab:a0:a1:fc:0d:1e:ba:7b:ef:9e: 1d:2f:b8:bd:d0:7e:19:75:93:d4:b7:25:03:4a:0b:68:b4:73: 6e:35:e4:37:07:ce:1e:b5:57:7a:0e:a7:99:b4:fd:bd:72:3a: ea:f1:d7:2d:62:a8:ba:15:86:79:4b:a3:fc:aa:10:b6:38:9b: e0:14:f0:79:97:c7:6a:4e:1b:97:0d:e8:3f:a2:b4:f2:e9:00: a0:36:87:f5:65:78:47:b8:21:74:55:cf:4b:10:52:41:57:59: cc:f0:74:db:d6:1d:d5:c0:93:d1:37:20:56:06:10:76:d5:1b: fb:b1:1d:a0:6f:3c:47:15:e2:a3:90:d7:99:53:f3:08:45:c4: 93:57:5b:dc:0d:99:57:ac:13:5f:ab:0c:7c:ce:49:ca:23:df: a0:56:72:8b:ee:77:1a:bb:90:c8:38:a9:33:a9:46:2a:84:2a: f1:a5:dd:d0:b1:d4:bd:0f:3e:30:22:a6:56:0f:0c:d9:a8:16: d0:4b:36:ea:ae:6a:20:78:7b:65:7b:d4:ec:ce:3b:33:04:71: d5:92:38:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtvYdTVZVb/qeoi6jkzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx NThhYTkwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD Eyg5MDJlOGE5NWYyNTNjNTExZGI1OWY2MjM4MjYxNDc1OThmODMzMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCOxbsVFcaQyU7yLNJ5Ew98Rm9SP tznjt6KohWkfNz691IlY8vcZHaK5NgVHEMB+W2UUOz0EqQ017EmgPKNQyNwtlvc0 jLlIQjE0mzIHaNCKD32hUAwY0lioQ2ZqYGU7xUWa+JvjpouDKV3jxvwI0+VTR0TD IEqJuSi4w792i5lQDD0Hv7qoSRkQZ6j5rUhjFkj/PzLMVv9KwWWbSikJYLYeHy/l N/6rqK4fn7BFISZu1FiWIdPia6rp1FqddtfxFDD8UBU0eZuPI/a1/SVrhXphtnPU /5rD72V0legHHxyAPKCffEq/Q4NaP1TXu1cphMEJJoZE2yFuRZsxfjqVywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAuipXyU8UR21n2I4JhR1mPgzABMB8GA1UdIwQY MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt NWEzNjEyMzUyYjM3LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3 LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT7NNsV9 GfegkjXT/zT/bQ4wHJD4XRHr8QSLkOGPZ40gIt4U+IeHtruNwZ+roKH8DR66e++e HS+4vdB+GXWT1LclA0oLaLRzbjXkNwfOHrVXeg6nmbT9vXI66vHXLWKouhWGeUuj /KoQtjib4BTweZfHak4blw3oP6K08ukAoDaH9WV4R7ghdFXPSxBSQVdZzPB029Yd 1cCT0TcgVgYQdtUb+7EdoG88RxXio5DXmVPzCEXEk1db3A2ZV6wTX6sMfM5JyiPf oFZyi+53GruQyDipM6lGKoQq8aXd0LHUvQ8+MCKmVg8M2agW0Es26q5qIHh7ZXvU 7M47MwRx1ZI46Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:49 2025 by rpki-client